Skip to content
OpenAdvisories

Product · SAP

Odata

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-66773

    Server-controlled `__next` URL is not checking cross-origin

    A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on confidentiality and low impact on integrity and no impact on Availability.

    SAP Odata